$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a8d1ac93-6ad5-3841-9e9d-32e43385a52a.roa File: a8d1ac93-6ad5-3841-9e9d-32e43385a52a.roa (raw, json) Hash identifier: KHhioy4gGLajk2j//3oO3fPEY1fGKfI54TNSdYzrIBQ= Subject key identifier: D7:AF:3C:D5:56:1E:07:81:F1:1F:5D:75:E6:F7:E6:EA:10:E4:16:BD Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D932562498275A2D74B909180 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a8d1ac93-6ad5-3841-9e9d-32e43385a52a.roa Signing time: Tue 21 Apr 2026 01:00:24 +0000 ROA not before: Tue 21 Apr 2026 01:00:24 +0000 ROA not after: Mon 20 Jul 2026 01:00:24 +0000 asID: 213120 IP address blocks: 209.200.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:93:25:62:49:82:75:a2:d7:4b:90:91:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 21 01:00:24 2026 GMT Not After : Jul 20 01:00:24 2026 GMT Subject: CN=d9bcdb5b-fec1-48bb-aa2b-25ee2714cc75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:62:a5:f8:11:0c:67:38:3d:13:1c:a5:e8:97: 43:e2:ad:d0:7d:e9:45:a2:1f:c6:e5:26:96:8c:78: 62:7d:08:de:86:5a:33:50:25:1f:b3:76:c5:c1:79: b8:9e:ca:3c:dc:74:02:72:c7:4b:3e:06:f0:83:64: f7:9f:ce:c5:64:8d:af:3e:f4:f0:8e:23:6b:f7:05: ae:5c:be:31:c0:1e:8f:c0:5f:3f:a4:83:d8:69:98: f4:b5:ee:7d:b2:cc:87:7a:75:be:b9:78:db:8f:22: 60:29:51:c9:b9:42:54:6f:64:5d:97:6f:e6:95:9d: 55:f6:d4:c9:6c:f3:7e:51:cc:47:70:ca:a2:d8:c3: 12:4d:18:b5:26:d7:da:09:5c:e2:a4:86:98:0b:27: e7:f8:ac:52:58:32:14:1d:3a:15:18:91:eb:78:fb: 88:8f:45:bb:e5:e1:00:04:4a:2a:7a:a0:d1:65:a6: 47:7b:27:61:5d:39:65:70:ba:d1:55:71:95:df:9f: ab:1f:40:38:f5:b7:76:4d:f3:b3:40:79:05:98:59: d4:40:d0:23:b1:c7:84:d8:dc:2a:37:db:0d:63:3e: 29:d0:e2:87:00:31:e5:c8:e3:d5:6c:2b:59:97:18: 70:9d:cf:81:fb:c3:f1:69:83:51:e6:d2:92:68:02: 43:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:AF:3C:D5:56:1E:07:81:F1:1F:5D:75:E6:F7:E6:EA:10:E4:16:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a8d1ac93-6ad5-3841-9e9d-32e43385a52a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 209.200.129.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:a3:e7:7d:36:c2:22:af:7e:ce:14:e3:82:97:1a:39:c0:ce: fa:b3:35:7a:e9:a7:ef:91:c7:df:33:d8:63:b2:15:94:fd:74: 58:05:78:e1:7f:61:1d:8d:b1:31:3b:0b:d3:d5:df:1e:8f:44: 00:8d:2d:5e:cc:ca:b9:72:01:82:66:7e:7f:5e:d1:41:6f:72: a7:04:eb:46:57:22:e1:bd:29:72:60:aa:25:15:2d:b3:53:3d: ad:56:2f:65:33:f7:c6:06:ca:95:e2:66:e6:cb:3c:01:59:e2: ba:9a:75:1f:ab:e1:69:b2:c6:ff:7e:26:a9:4c:ec:e8:55:81: 0a:b4:70:20:c4:d1:6a:97:60:d6:7d:68:a0:e6:df:32:16:f4: bd:65:54:f5:ba:54:32:07:cb:af:0b:33:7b:7d:a8:7c:6f:d6: 66:7f:7b:8f:30:d4:b3:5e:33:45:fb:70:72:a1:a5:c5:7d:d0: 29:5c:57:c7:8d:ae:ed:11:c4:33:43:cf:e2:59:bc:d7:2d:d3: 75:44:ef:26:59:80:4b:14:97:06:c2:9d:13:b9:31:b0:22:a2: 1d:52:d2:dc:b3:0f:04:f8:eb:84:dd:1d:26:34:6c:b1:1e:88: 7e:d1:49:db:02:ff:76:fa:90:6b:a9:62:4d:6f:e0:59:6a:9c: ae:dc:ef:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2TJWJJgnWi10uQkYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDQyMTAxMDAyNFoXDTI2MDcyMDAxMDAyNFowLzEtMCsGA1UEAxMk ZDliY2RiNWItZmVjMS00OGJiLWFhMmItMjVlZTI3MTRjYzc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw2Kl+BEMZzg9Exyl6JdD4q3QfelFoh/G5SaW jHhifQjehlozUCUfs3bFwXm4nso83HQCcsdLPgbwg2T3n87FZI2vPvTwjiNr9wWu XL4xwB6PwF8/pIPYaZj0te59ssyHenW+uXjbjyJgKVHJuUJUb2Rdl2/mlZ1V9tTJ bPN+UcxHcMqi2MMSTRi1JtfaCVzipIaYCyfn+KxSWDIUHToVGJHrePuIj0W75eEA BEoqeqDRZaZHeydhXTllcLrRVXGV35+rH0A49bd2TfOzQHkFmFnUQNAjsceE2Nwq N9sNYz4p0OKHADHlyOPVbCtZlxhwnc+B+8PxaYNR5tKSaAJDvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNevPNVWHgeB8R9ddeb35uoQ5Ba9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYThkMWFjOTMtNmFkNS0z ODQxLTllOWQtMzJlNDMzODVhNTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ciBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFij5302wiKvfs4U44KXGjnAzvqzNXrpp++Rx98z2GOyFZT9dFgFeOF/ YR2NsTE7C9PV3x6PRACNLV7MyrlyAYJmfn9e0UFvcqcE60ZXIuG9KXJgqiUVLbNT Pa1WL2Uz98YGypXiZubLPAFZ4rqadR+r4Wmyxv9+JqlM7OhVgQq0cCDE0WqXYNZ9 aKDm3zIW9L1lVPW6VDIHy68LM3t9qHxv1mZ/e48w1LNeM0X7cHKhpcV90ClcV8eN ru0RxDNDz+JZvNct03VE7yZZgEsUlwbCnRO5MbAioh1S0tyzDwT464TdHSY0bLEe iH7RSdsC/3b6kGupYk1v4FlqnK7c74c= -----END CERTIFICATE-----Generated at Tue Apr 21 20:37:31 2026 by rpki-client